Dear Valued Customer,
We would like to inform you of an important security advisory regarding two recently identified critical vulnerabilities in PHP, the programming language used by many websites, including WordPress, Joomla, and other PHP-based applications.
These vulnerabilities have been identified as:
-
CVE-2026-109618
-
CVE-2026-109619
The vulnerabilities affect multiple PHP versions, including older versions, and could potentially allow unauthorised attackers to execute malicious code on affected systems.
What is LankaHost doing?
At LankaHost, the security and reliability of your websites and hosting services are our priority.
Our technical team is reviewing the security advisories and coordinating the deployment of the necessary updates across our managed shared hosting infrastructure.
We are taking the following steps:
-
Security Updates: Preparing to apply the latest security patches as they become available through our hosting software vendors.
-
Server Monitoring: Monitoring our hosting infrastructure for suspicious activity and potential security threats.
-
Security Review: Reviewing affected PHP versions and relevant server configurations.
-
Service Continuity: Working to minimise any potential disruption while implementing the required security updates.
For customers using our Shared Hosting, Business Hosting, and WordPress Hosting services, server-level PHP security updates will be managed by LankaHost. You do not need to manually update the server software.
Do you need to take any action?
For most shared hosting customers, no immediate action is required to apply the server-level security patches.
However, we strongly recommend that you:
-
Keep your website updated: Ensure WordPress, Joomla, plugins, themes, and other applications are running supported versions.
-
Review your PHP version: If your website uses an older PHP version, consider upgrading to a supported version. You can check this through your hosting control panel.
-
Maintain regular backups: Keep a recent backup of your website and database, particularly before making application-level changes.
If your website depends on an older PHP version, we recommend contacting our support team for guidance before upgrading to avoid potential compatibility issues.
Will this affect your website?
We aim to complete the required security updates with minimal disruption.
In some cases, server-level updates may require services to be restarted briefly. Any significant maintenance affecting service availability will be communicated where necessary.
Further Updates
We are closely following the official PHP and cPanel security advisories and will continue implementing the appropriate security updates.
We will provide further information if any additional action is required from our customers.
If you have questions or need assistance, please contact our support team through the LankaHost Client Area.
Thank you for choosing LankaHost and trusting us with your online presence.
Best regards,
LankaHost Security & Technical Support Team
LankaHost Web Solutions (Pvt) Ltd
https://www.lankahost.lk
